Personal
< Products
Device Protection & Antivirus
Premium Security Antivirus
Mobile Security for Android & iOS
Identity Protection
Identity Theft Protection
Personal Data Remover
Digital Footprint Scanner
Privacy Protection
Privacy VPN
Browser Guard
AdwCleaner
Have a current computer infection?
Free Virus Scan
Worried it’s a scam?
Free Scam Guard tool
Try our antivirus with a free, full-featured 14-day trial
Free Antivirus
Get your free digital security toolkit
Explore all free tools

Find the right cyberprotection for you
Compare plans and pricing
Business

< Business

Teams
Protect small & home offices – no IT expertise needed
ThreatDown
Award-winning endpoint security for small and medium businesses
Pricing

< Pricing

Personal pricing
Protect your personal devices and data
Small or home office pricing
Protect your team’s devices and data – no IT skills needed
Corporate pricing
Explore award-winning endpoint security for your business
Partners
Resources
< Resources
Security terms glossary
Threat Center
Cybersecurity News
About Malwarebytes
Press
Careers
Cybersecurity Resource Center
Antivirus
Malware
Phishing
Ransomware
Small business hub
See all articles
Help

< Support

Malwarebytes Help Center
Malwarebytes and Teams Customers
ThreatDown Business Support
Nebula and Oneview Customers
Community Forums

CVE-2020-11507 – Untrusted Search Path vulnerability in AdwCleaner

SUMMARY:

An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded.

AFFECTED VERSIONS

Malwarebytes AdwCleaner 8.0.3

PATCHED VERSIONS

Malwarebytes AdwCleaner 8.0.4

MITIGATION ADVICE

We recommend upgrading the affected endpoints to the patched versions.

DETAILS

CWE	CVS 3.x	CVS 2	Impact
CWE-426: Untrusted Search Path	7.8 High	6.9 Medium	Local

REFERENCES

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11507

https://forums.malwarebytes.com/topic/258140-release-adwcleaner-804/